Actuel
- PAM - Fix a compatibility issue between current server version and last service version causing the service not to receive tasks properly
- PAM - Validate gateway rulesets before AD provider domain controller detection
Notes de publication
- PAM - Add support for Enable/Disable mode for M365 JIT provisioning that keeps accounts in place instead of recreating them on every checkout
- PAM - Improved domain provider security by validating the domain controller certificate on LDAPS connections
- PAM - Fixed a domain provider heartbeat reporting success when the provider or the privileged account had no password set
- PAM - Fixed a just-in-time provisioned account being left locked after check-in because its stored credential was cleared while the entry was still checked out
- PAM - Fixed domain provider heartbeat clearing the SID, user principal name and account name instead of populating them from the directory
- PAM - Add support for gateway session recording cleanup after a defined retention time
- PAM - Add support for checkout request extension
- PAM - Add support for enhanced password rotation schedule
- PAM - Add support for PAM provider password rotation
- PAM - Fix a bug causing password rotation to drift timer over time
- Encryption - Add support for multiple SSO providers
- PAM - Clarify JIT elevation error codes
- PAM - Fix an issue causing a long delay to stop the service
- PAM - Fix an issue causing system-wide scheduled heartbeat to fail on some entries
- PAM - Add support for providers group management feature (add / remove accounts from specific provider groups)
- Follow rebranding from Devolutions Hub to Devolutions Cloud in installer
- PAM - Support option to use provider's credential to validate account heartbeat for SSH
- PAM - Support PAM service logs retrieval from web UI
- PAM - Fix any identity templates not being able to do a heartbeat automatically after a reset password
- Automatically detect currently installed services on silent update
- PAM - Support Gateway rule sets on PAM providers
- PAM - Fix an issue regarding the auto-check in process communication between server and service
- PAM - Fix service crash when system setting password policy mode is set on "From provider"
- PAM - Fix timeout when searching by group on EntraID provider
- Fix issue preventing PAM service to start properly in Docker
- PAM - Add ability to set risk levels on Active Directory and EntryID groups and roles
- PAM - Add MongoDB provider support for PAM managed accounts
- PAM - Add PAM service auto-updater with silent MSI installer support
- PAM - Add support for SSH JIT templates (SSH Jit via sudo)
- PAM - Enable security group risk features for Hub data sources
- PAM - Add TLS validation option for PowerShell-based PAM connections
- PAM - Add variable resolution support in PAM service session token creation
- PAM - Support multiple PAM services running simultaneously for high availability
- PAM - Terminate gateway sessions on PAM account check-in
- PAM - Update Hub Services installer to include Devolutions EULA
- Encryption - Various bug fixes and improvements
- PAM - Fix Docker-hosted PAM services incorrectly requiring an agent
- PAM - Fix forced virtual gateway validation not applying in RDM with PAM service
- PAM - Fix heartbeat crash when the FromProvider setting is configured on a provider
- PAM - Fix Hub Services installer being blocked by hub key hash validation
- PAM - Fix installer prompting to delete configuration files during upgrade
- PAM - Fix JIT domain elevation resolving user rights by username instead of SID
- PAM - Fix memory leak in scheduled PAM tasks
- PAM - Fix PAM checkout corrupting account passwords when service is unreachable
- PAM - Fix PAM service not starting automatically after machine reboot
- PAM - Fix password rotation policy not being checked before resetting password on failed JIT elevation
- PAM - Fix SID not being appended to manually created EntryID accounts
- PAM - Various bug fixes and improvements
- Reporting - Various bug fixes and improvements
- PAM - Added a domain/AD scan filter on a given domain container
- PAM - Added Entra ID JiT support
- PAM - Added SSH providers
- PAM - Added support for account lifecycle policies
- PAM - Just-in-time (JIT) elevation support for domain users
- PAM - New provider for Amazon Web Service (AWS) Identity and Access Management (IAM)
- PAM - New provider for PostgreSQL
- PAM - Fixed password resets and heartbeat with corrupted entries
- Various bug fixes and improvements
- Enhanced error handling with clearer and more descriptive messages
- Fix an issue in the Reporting Service that occasionally caused errors when retrieving entries from specific vaults
- Fixed Reporting Service connection issue with the Hub
- Fixed issue with PowerShell legacy mode not working with AnyIdentity providers in PAM service
- Added foundational support for AWS IAM account discovery, import, password reset, and heartbeat checks
- Added new domain provider: Active Directory (AD)
- Added new reporting service to detect compromised passwords: HaveIBeenPwned
- Improved PAM service logging for better traceability
- Provider cache is now cleared on connection failures
- Fixed issue where Hub services used outdated cached provider credentials
- Azure AD account discovery in Hub now supports filtering by user groups and roles for quicker management
- Improved password generator in PAM
- Fixed issue in services installer where the "Modify" flow did not properly save configuration changes
- Resolved an issue where AnyIdentity Discovery failed when using the ExcludeDisabledAccountsInDiscovery parameter
- Fixed an issue with PAM Password Reset functionality
- Added account discovery on PAM providers
- Added checkout policies
- Added PAM AnyIdentity templates
- Added PAM propagation scripts
- Added scheduled PAM heartbeat
- Added support for gateway farms
- Added support for the Devolutions Hub reporting service
- Allowed inherited settings for password rotation schedules
- The gateway can now be generated by the service instead of the client
- Various fixes
- All services - Updated to .net 9
- PAM Service - Updated to use the new APIs of Hub Business 2024.3.100
- Various bug fixes and improvements
- PAM Service - Added PowerShell engine for the upcoming AnyIdentity management
- PAM Service - Fixed an inconsistent test provider result
- Various bug fixes and improvements
- Encryption Service - Added auto reconnect when application idenity (app user) loose connection to Hub
- Encryption Service - Added more details in error messages
- Encryption Service - Fixed access denied after being invited
- Encryption Service - Fixed select account not working correctly
- Encryption Service - Updated Docker container to .Net 8
- Adds support for password rotation policies in PAM
- Encryption Service - Added support
- PAM - Switch to immediate tasks instead of regular polling for tasks
- Core - Fixed generated password not being saved in entries
- Initial release with password reset for Azure AD providers